Update WordPress password when password reset is not working (Alternative ways) - [Compromised/Weak password alert]

Issue

The password reset feature used within the Account compromised, or Weak Password alert is managed by WordPress and sometimes may fail.

Environment

• WordPress.
• Any supported Panel.
• Any supported OS.
• Imunify360.
• Web Application Firewall

Solution

Since the WordPress password reset is far from perfect, and it sometimes fails to send the email and/or report the password change, WordPress has a detailed documentation on how to change the password via:

• WordPress CLI (Recommended)
• PHPMyAdmin
• FTP (Least recommended)

Although it is possible to update the password through FTP or SSH, it is not recommended, as it requires manual modification of PHP files, which can result in a broken site due to a mistake while writing the syntax.

All the information from the WordPress documentation and alternative methods are available in the link below:

https://wordpress.org/documentation/article/reset-your-password/

Cause

WordPress password reset feature may fail while sending the email or reporting the password change, also, the customer may have a different email registered than the one assumed.

Useful links

https://wordpress.org/documentation/article/reset-your-password/